Relay-Version: version B 2.10 5/3/83; site utzoo.UUCP Posting-Version: version B 2.10.2 9/5/84; site reed.UUCP Path: utzoo!linus!philabs!prls!amdimage!amdcad!amd!pesnta!hplabs!tektronix!reed!fleep From: fleep@reed.UUCP (Philip Ljubicich) Newsgroups: net.crypt Subject: Re: How secure is 'crypt'? Message-ID: <1477@reed.UUCP> Date: Tue, 7-May-85 17:57:49 EDT Article-I.D.: reed.1477 Posted: Tue May 7 17:57:49 1985 Date-Received: Sat, 11-May-85 23:56:58 EDT References: <287@sdcc12.UUCP> Reply-To: fleep@reed.UUCP (Philip Ljubicich) Organization: Reed College, Portland, Oregon Lines: 25 In article <287@sdcc12.UUCP> wa371@sdcc12.UUCP (wa371) writes: >Can anyone tell me how secure 'crypt' is on a UNIX system? >Lets assume that the password is secure and not obvious. >Thanks, >Bernd R. > >Bernd 'bear-nd' *** hooray for USENET *** >(Not affiliated with, nor speaking for U.C. San Diego) >UUCP: ...!ucbvax!sdcsvax!sdcc12!wa371, ARPA: sdcsvax!sdcc12!wa371@nosc Although I can't answer the main question, I can give you something to look out for. I was cleaning up my files one day while my friend was encrypting some files. I did a 'w' command to find out why the load average was so high, and low and behold I see my friend has done the command 'crypt franklin < diary > temp'. It is possible for someone to pickup your password by accident, or intentionally, if they are monitoring the processes running while you are encrypting. I realize that this isn't what was requested, but I thought it might be useful. Good luck, fleep (Philip Ljubicich)